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We prove explicitly that the detection probability of the disturbance attack in the recently pro- 
posed quantum dialogue protocol is 3/4 in average. The purpose is not only to reply a comment but 
also to provide a deeper understanding of a kind of tampering in an unauthorized communication. 
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'^ ■ Of late Cai made a comment Il| on our protocol 2] that enables two authorized parties to securely exchange their 

3^ ' messages in a deterministic and direct manner resembling a dialogue, hence the name "quantum dialogue" protocol (a 

i^ ' similar idea with less capacity was touched upon earlier in |^] where no full sets of steps necessary enough to securely 

' process the protocol were shown; see also Q for a different possible scheme). Cai reniarked that the detection 

^ probability d of the disturbance attack per control mode run is 1/2 but not 3/4 as said in 2']. 

I ^ First, if Cai's notification were right, it does not so much influence the quantum dialogue protocol which remains 

^^ , still asymptotically secure. Second, however, in average d should be 3/4 indeed, instead of 1/2, as will be shown 

^^ ' explicitly now. To make it rigorous and explicit as much as possible we shall not be shy to expose the mathematical 

formulation in full detail in what follows. 

,_^ ■ At the beginning, i.e. in the preparation stage. Bob is supposed to be provided with a large enough number of 

^ ' maximally two-qubit entangled states (Einstein-Podolsky-Rosen pairs) 

o\' 

^: i%o),,-^(io)ji), + ii)jo)j. (1) 
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Bob encodes his two secrete bits k, I € {0, 1} by applying Cl ; (Cq q = 1, Cq i = cr^, C* q = <^l, C{i = ct*, and ct* . 



f~^ ■ the Pauli matrices) on qubit t to have the state 



cL,: Wt.,),„, = ^(ni,ci,m, + m,,cx,\if,,), m 



and sends qubit t to Alice. One way to disturb the communication is that Eve, the eavesdropper, measures the qubit 
t on the B ^ A route (similar results will be obtained if Eve's measurement is to be made on the A -^ B route) |^. 



n^i Eve's measurement outcome is that either 

K*" ' (a) she finds the state |l)j or 

rN (b) she finds the state |0)(, 

. . . . with a probability of 50% each. Then Eve sends on the measured qubit t to Alice. In case (a) the Alice-Bob pair 
state collapses into 

|0)„C*J1),, (3) 

whereas in case (b) it is 

\^)hCii\0)f (4) 

Alice being unaware of Eve's tampering encodes her two confidential bits i,j G {0, 1} by applying C* on the qubit t 
Eve has just sent her, then returns it back to Bob. In case (a) the Alice-Bob pair state becomes 



•Electronic address; lnbaan@kias.re.krl 



whereas in case (b) it is 



*''')^^ - \^)hCIcI, |0), = \i),Mm,m I0)f 



(6) 



In Eqs. © and (EJ the © stands for an addition mod 2 and we have omitted the unimportant phase factor 4'i,j,k,i for 
simphcity (see 2] for its exphcit expression). 
Now we observe the fohowing identities 



C. 



a,b I 



{-irSa(sb.o\l)t + {irSaeb.i\0), 



and 



Clb\0)t = Saeb.o\0)t + HrSamA\l)t 



(7) 



(8) 



which can directly be verified for any a,b G {0,1}. In Eqs. and 
identities Q) and l|SIl in Eqs. lO and ©, respectively, yields 



Sm.n is the Kroneker symbol. Using the 

/ ht 
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and 



I ht 



'5.7,0 iio),, + (-*r"-5j,i 111) 



ht 



(10) 



where J = i®k®j ®l. 

Another universal (i.e., valid for any /i, i^ G {0, 1}) identity which can also be justified by direct inspection is 



\M 
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tiiSvlht 



+ (-l)nM'i,^e.> J 



(11) 



Use of the identity (|ll|l in Eqs. l|njl and (|10|l re-expresses the latter in the Bell basis as 

1 
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(-l)^®'^^7,0(|*0,l),, + |*l,l)J 

(^)'®'^<5,,l(|*o,o),, + |*l,o),J 



(12) 



and 
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^<5j,o(|*o,i)„,-|*i, 
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(13) 



The above formulae (|12|l and H13|l allow us to calculate the average detection probability. Namely, since i, j, fc, I G 
{0, 1} there are four possibilities in all: 

(i) {i®k^Q,j®l = Q}^ J = Q., 

(ii) {i®k = Q,j®l = l} ^ J =1, 

(iii) {i©fc = l,je? = 0} =^ J= 1, 

(iv) {i©/c = l,je/ = 1} =^ J = 0. 

We first deal with case (a) employing Eq. I|12|l . In case (a,i) the detection probability is d(a,i) = 1 since Bob never 
finds state \^ i®k,j®i) ut — |*o,o)i,( as he should in Eve's absence. In case (a,ii) the detection probability is dig^n\ — 1 



I ht 

also since Bob never finds state \^ 



i®k,j®llht 



— |*o,i);jt as he should in Eve's absence. In case (a, iii) the detection 

indicating 



i®ilht 



= * 



0,0/ 



ht 



probability is d(^a,iii) = 1/2 since there is a 50% probability that Bob finds state l^iefc, 

Eve's presence. In this case Bob should find state |^i©fc,j©/);jj = l^i.o)^^ if there is no eavesdropping, but that just as 
well occurs with a probability of 50%. Finally, in case (a,iv) the detection probability is d(^a,iv) = 1/2 also since there 
is a 50% probability that Bob finds state |*i©fe,j©/)/jt = |*o,i);i( indicating Eve's presence. In this case Bob should 



find state l^iefe.j©')^,* = l^i.i)/it ^^ there is no eavesdropping, but that occurs only with a probabiHty of 50%. With 
ah the four above possible situations taken into account in case (a) the average detection probability is calculated as 

1™ 1/ 11\3 

q—i ^ ' 

Similarly, employing Eq. (|13|l for case (b) we arrive at the results (i(6.i) — d(^i,iij ^ 1 and d^p^m) ~ di^b^i^) = 1/2 
yielding again dii,\ = 3/4. Hence, no matter which measurement outcome Eve gets the average detection probability 
under the disturbance attack by measuring qubit t en route is d = 3/4. 

Another way for Eve to disturb information is to apply a C* ^ on qubit t when it travels in between Alice and 
Bob. In the original (one-way) ping-pong protocol [3, where control mode and message mode are distinguishable. 
Eve can surely avoid all the runs in control mode. Then the intended message becomes absolutely meaningless if 
Eve randomly applies Cq g or C^ ^ on qubit t in every message mode run, as mentioned in [^. Yet, in the (two-way) 
quantum dialogue protocol presented in Q the control mode was modified so that Eve can by no means distinguish 
between runs in control mode and in message mode. Thus, she cannot avoid a control mode run and the quantum 
dialogue protocol in '^ is immune from such a kind of disturbing trick. Nevertheless, if the obstinate Eve still wishes 
to do that trick, the Alice-Bob pair state when qubit t came back to Bob after Alice's encoding and after Eve had 
at random applied an operator C^ j, (with u,w e {0,1}) is \^ i®k®u,i®i®v) }^i , up to a global phase factor. Unless 
u — V — 0, Eve is inevitably disclosed after Bob's Bell measurement. Obviously, the probability of detecting Eve is 
again 3/4. 
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